Automating Mobile Device File Format Analysis

Forensic tools assist examiners in extracting evidence from application files from mobile devices. If the file format for the file of interest is known, this process is straightforward, otherwise it requires the examiner to manually reverse engineer the data structures resident in the file. This research presents the Automated Data Structure Slayer (ADSS), which automates the process to reverse engineer unknown file for- mats of Android applications. After statically parsing and preparing an application, ADSS dynamically runs it, injecting hooks at selected methods to uncover the data structures used to store and process data before writing to media. The resultant association between application semantics and bytes in a file reveal the structure and file format. ADSS has been successfully evaluated against Uber and Discord, both popular Android applications, and reveals the format used by the respective proprietary application files stored on the filesystem

Secondary Structures in Long Compact Polymers

Compact polymers are self-avoiding random walks which visit every site on a lattice. This polymer model is used widely for studying statistical problems inspired by protein folding. One difficulty with using compact polymers to perform numerical calculations is generating a sufficiently large number of randomly sampled configurations. We present a Monte-Carlo algorithm which uniformly samples compact polymer configurations in an efficient manner allowing investigations of chains much longer than previously studied. Chain configurations generated by the algorithm are used to compute statistics of secondary structures in compact polymers. We determine the fraction of monomers participating in secondary structures, and show that it is self averaging in the long chain limit and strictly less than one. Comparison with results for lattice models of open polymer chains shows that compact chains are significantly more likely to form secondary structure.Comment: 14 pages, 14 figure

Application of CFD Analysis to Design Support and Problem Resolution for ASRM and RSRM

The use of Navier-Stokes CFD codes to predict the internal flow field environment in a solid rocket motor is a very important analysis element during the design phase of a motor development program. These computational flow field solutions uncover a variety of potential problems associated with motor performance as well as suggesting solutions to these problems. CFD codes have also proven to be of great benefit in explaining problems associated with operational motors such as in the case of the pressure spike problem with the STS-54B flight motor. This paper presents results from analyses involving both motor design support and problem resolution. The issues discussed include the fluid dynamic/mechanical stress coupling at field joints relative to significant propellant deformations, the prediction of axial and radial pressure gradients in the motor associated with motor performance and propellant mechanical loading, the prediction of transition of the internal flow in the motor associated with erosive burning, the accumulation of slag at the field joints and in the submerged nozzle region, impingement of flow on the nozzle nose, and pressure gradients in the nozzle region of the motor. The analyses presented in this paper have been performed using a two-dimensional axisymmetric model. Fluent/BFC, a three dimensional Navier-Stokes flow field code, has been used to make the numerical calculations. This code utilizes a staggered grid formulation along with the SIMPLER numerical pressure-velocity coupling algorithm. Wall functions are used to represent the character of the viscous sub-layer flow, and an adjusted k-epsilon turbulence model especially configured for mass injection internal flows, is used to model the growth of turbulence in the motor port. Conclusions discussed in this paper consider flow field effects on the forward, center, and aft propellant grains except for the head end star grain region of the forward propellant segment. The field joints and the submerged nozzle are discussed as well. Conclusions relative to both the design evaluation of the ASRM and the RSRM scenarios explaining the pressure spikes were based on the flow field solutions presented in this paper

A Coupled CFD/FEM Structural Analysis to Determine Deformed Shapes of the RSRM Inhibitors

Recent trends towards an increase in the stiffness of the acrylonitrile butadiene rubber (NBR) insulation material used in the construction of the redesigned solid rocket motor (RSRM) propellant inhibitors prompted questions about possible effects on RSRM performance. The specific objectives of the computational fluid dynamics (CFD) task included: (1) the definition of pressure loads to calculate the deformed shape of stiffer inhibitors, (2) the calculation of higher port velocities over the inhibitors to determine shifts in the vortex shedding or edge tone frequencies, and (3) the quantification of higher slag impingement and collection rates on the inhibitors and in the submerged nose nozzle cavity

SRM Internal Flow Test and Computational Fluid Dynamic Analysis

During the four year period of performance for NASA contract, NASB-39095, ERC has performed a wide variety of tasks to support the design and continued development of new and existing solid rocket motors and the resolution of operational problems associated with existing solid rocket motor's at NASA MSFC. This report summarizes the support provided to NASA MSFC during the contractual period of performance. The report is divided into three main sections. The first section presents summaries for the major tasks performed. These tasks are grouped into three major categories: full scale motor analysis, subscale motor analysis and cold flow analysis. The second section includes summaries describing the computational fluid dynamics (CFD) tasks performed. The third section, the appendices of the report, presents detailed descriptions of the analysis efforts as well as published papers, memoranda and final reports associated with specific tasks. These appendices are referenced in the summaries. The subsection numbers for the three sections correspond to the same topics for direct cross referencing

Traffic Collision Avoidance System: False Injection Viability

Safety is a simple concept but an abstract task, specifically with aircraft. One critical safety system, the Traffic Collision Avoidance System II (TCAS), protects against mid-air collisions by predicting the course of other aircraft, determining the possibility of collision, and issuing a resolution advisory for avoidance. Previous research to identify vulnerabilities associated with TCAS’s communication processes discovered that a false injection attack presents the most comprehensive risk to veritable trust in TCAS, allowing for a mid-air collision. This research explores the viability of successfully executing a false injection attack against a target aircraft, triggering a resolution advisory. Monetary constraints precluded access to a physical TCAS unit; instead, this research creates a novel program, TCAS-False Injection Environment (TCAS-FIE), that incorporates real-world distributed computing systems to simulate a ground-based attacker scenario which explores how a false injection attack could target an operational aircraft. TCAS-FIEs’ simulation models are defined by parameters to execute tests that mimic real-world TCAS units during Mode S message processing. TCAS-FIE simulations execute tests over applicable ranges (5–30 miles), altitudes (25–45K ft), and bearings standard for real-world TCAS tracking. The comprehensive tests compare altitude, measure range closure rate, and measure signal strength from another aircraft to determine the delta in bearings over time. In the attack scenario, the ground-based adversary falsely injects a spoofed aircraft with characteristics matching a Boeing 737-800 aircraft, targeting an operational Boeing 737-800 aircraft. TCAS-FIE completes 555,000 simulations using the various ranges, altitudes, and bearings. The simulated success rate to trigger a resolution advisory is 32.63%, representing 181,099 successful resolution advisory triggers out of 555,000 total simulations. The results from additional analysis determine the required ranges, altitudes, and bearing parameters to trigger future resolution advisories, yielding a predictive threat map for aircraft false injection attacks. The resulting map provides situational awareness to pilots in the event of a real-world TCAS anomaly

Design of a Subscale Propellant Slag Evaluation Motor Using Two-Phase Fluid Dynamic Analysis

Small pressure perturbations in the Space Shuttle Reusable Solid Rocket Motor (RSRM) are caused by the periodic expulsion of molten aluminum oxide slag from a pool that collects in the aft end of the motor around the submerged nozzle nose during the last half of motor operation. It is suspected that some motors produce more slag than others due to differences in aluminum oxide agglomerate particle sizes that may relate to subtle differences in propellant ingredient characteristics such as particle size distributions or processing variations. A subscale motor experiment was designed to determine the effect of propellant ingredient characteristics on the propensity for slag production. An existing 5 inch ballistic test motor was selected as the basic test vehicle. The standard converging/diverging nozzle was replaced with a submerged nose nozzle design to provide a positive trap for the slag that would increase the measured slag weights. Two-phase fluid dynamic analyses were performed to develop a nozzle nose design that maintained similitude in major flow field features with the full scale RSRM. The 5 inch motor was spun about its longitudinal axis to further enhance slag collection and retention. Two-phase flow analysis was used to select an appropriate spin rate along with other considerations, such as avoiding bum rate increases due to radial acceleration effects. Aluminum oxide particle distributions used in the flow analyses were measured in a quench bomb for RSRM type propellants with minor variations in ingredient characteristics. Detailed predictions for slag accumulation weights during motor bum compared favorably with slag weight data taken from defined zones in the subscale motor and nozzle. The use of two-phase flow analysis proved successful in gauging the viability of the experimental program during the planning phase and in guiding the design of the critical submerged nose nozzle

Transgenic wheat expressing a barley class II chitinase gene has enhanced resistance against Fusarium graminearum

Fusarium head blight (FHB; scab), primarily caused by Fusarium graminearum, is a devastating disease of wheat worldwide. FHB causes yield reductions and contamination of grains with trichothecene mycotoxins such as deoxynivalenol (DON). The genetic variation in existing wheat germplasm pools for FHB resistance is low and may not provide sufficient resistance to develop cultivars through traditional breeding approaches. Thus, genetic engineering provides an additional approach to enhance FHB resistance. The objectives of this study were to develop transgenic wheat expressing a barley class II chitinase and to test the transgenic lines against F. graminearum infection under greenhouse and field conditions. A barley class II chitinase gene was introduced into the spring wheat cultivar, Bobwhite, by biolistic bombardment. Seven transgenic lines were identified that expressed the chitinase transgene and exhibited enhanced Type II resistance in the greenhouse evaluations. These seven transgenic lines were tested under field conditions for percentage FHB severity, percentage visually scabby kernels (VSK), and DON accumulation. Two lines (C8 and C17) that exhibited high chitinase protein levels also showed reduced FHB severity and VSK compared to Bobwhite. One of the lines (C8) also exhibited reduced DON concentration compared with Bobwhite. These results showed that transgenic wheat expressing a barley class II chitinase exhibited enhanced resistance against F. graminearum in greenhouse and field conditions

Advanced Automata Minimization

We present an efficient algorithm to reduce the size of nondeterministic Buchi word automata, while retaining their language. Additionally, we describe methods to solve PSPACE-complete automata problems like universality, equivalence and inclusion for much larger instances (1-3 orders of magnitude) than before. This can be used to scale up applications of automata in formal verification tools and decision procedures for logical theories. The algorithm is based on new transition pruning techniques. These use criteria based on combinations of backward and forward trace inclusions. Since these relations are themselves PSPACE-complete, we describe methods to compute good approximations of them in polynomial time. Extensive experiments show that the average-case complexity of our algorithm scales quadratically. The size reduction of the automata depends very much on the class of instances, but our algorithm consistently outperforms all previous techniques by a wide margin. We tested our algorithm on Buchi automata derived from LTL-formulae, many classes of random automata and automata derived from mutual exclusion protocols, and compared its performance to the well-known automata tool GOAL.Comment: 15 page

A review of Monte Carlo simulations of polymers with PERM

In this review, we describe applications of the pruned-enriched Rosenbluth method (PERM), a sequential Monte Carlo algorithm with resampling, to various problems in polymer physics. PERM produces samples according to any given prescribed weight distribution, by growing configurations step by step with controlled bias, and correcting "bad" configurations by "population control". The latter is implemented, in contrast to other population based algorithms like e.g. genetic algorithms, by depth-first recursion which avoids storing all members of the population at the same time in computer memory. The problems we discuss all concern single polymers (with one exception), but under various conditions: Homopolymers in good solvents and at the $\Theta$ point, semi-stiff polymers, polymers in confining geometries, stretched polymers undergoing a forced globule-linear transition, star polymers, bottle brushes, lattice animals as a model for randomly branched polymers, DNA melting, and finally -- as the only system at low temperatures, lattice heteropolymers as simple models for protein folding. PERM is for some of these problems the method of choice, but it can also fail. We discuss how to recognize when a result is reliable, and we discuss also some types of bias that can be crucial in guiding the growth into the right directions.Comment: 29 pages, 26 figures, to be published in J. Stat. Phys. (2011